SkillTrust

← All skills

pentest-tools

65 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By skillmds/skillmd (GitHub) · coding · 143 stars · scanned at commit 4467dd0

主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。 通过 MCP server(pentestMCP / mcp-security-hub)将 20+ 安全工具暴露给 AI agent。 触发关键词:渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 18 places.

Show 15 more

Runs commands on your computer

The author does not mention this. Expected for a coding skill.

Found in 1 place.

Sends data to these websites: target, api.ipify.org, crt.sh, raw.githubusercontent.com, api.example, app.example, attacker.com, api.target.com, target.com

The author does not mention this.

Found in 12 places.

Show 9 more

Changes files outside its own folder

The author does not mention this.

Found in 1 place.

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Other copies in this repository

skillmds/skillmd has 1 more folder with a skill named pentest-tools. This page shows the lowest-scoring copy.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'pentest-tools' ] || [ -L ~/.agents/skills/'pentest-tools' ]; then echo 'A skill folder named pentest-tools already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/skillmds/skillmd' "$d" && git -C "$d" checkout --quiet '4467dd0debe8f189ba78142ee57ec42aea84e623' -- 'plugins/mcp-security-audit-pipeline/skills/pentest-tools' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/mcp-security-audit-pipeline/skills/pentest-tools' ~/.agents/skills/'pentest-tools' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'pentest-tools' ~/.claude/skills/'pentest-tools' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for skillmds/skillmd shows the score of its lowest-scoring skill.

SkillTrust badge for skillmds/skillmd

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/skillmds/skillmd.svg)](https://zalavijaysinh.github.io/skilltrust/repos/skillmds/skillmd/)

Score history

DateVersionScore
2026-11-094467dd065
2026-11-071b0ba8695